exploit-CVE-2023-38490

Kirby Entidad Externa XML XXE - exploit CVE-2023-38490 Kirby 3.9.6 Entidad Externa XML Exploit para CVE-2023-38490 / GHSA-q386-w6fg-gmgp. Demostración de explotación Construye y ejecuta la aplicación demo vulnerable: root@kitploit: cd docker docker buildx build -t kirby-starterkit-3.9.5 . docker...

CVE-2023-38490

Kirby is a content management system. A vulnerability in versions prior to 3.5.8.3, 3.6.6.3, 3.7.5.2, 3.8.4.1, and 3.9.6 only affects Kirby sites that use the Xml data handler e.g. Data::decode$string, 'xml' or the Xml::parse method in site or plugin code. The Kirby core does not use any of the...

CVE-2023-38490

creationtimestamp| type| source ---|---|--- 2023-07-27 18:28:52+00:00| seen| https://t.me/cibsecurity/67327 2023-10-22 23:59:41+00:00| published-proof-of-concept| Telegram/XE64T6pLzTJ90AYPy58VVIRsAmObrAuYSgMJK8bxg8ZF...

CVE-2023-38490 Kirby XML External Entity (XXE) vulnerability in the XML data handler

Kirby is a content management system. A vulnerability in versions prior to 3.5.8.3, 3.6.6.3, 3.7.5.2, 3.8.4.1, and 3.9.6 only affects Kirby sites that use the Xml data handler e.g. Data::decode$string, 'xml' or the Xml::parse method in site or plugin code. The Kirby core does not use any of the...